Information processing system and information processing method

Abstract

To provide a technique for preventing fraudulent receipt of benefits in measures for which an application is made using an individual number card.SOLUTION: A gateway server 20 acquires, when an individual logs in to a service, a first serial number which is a serial number of an electronic certificate for user certification read from a first individual number card. The gateway server 20 acquires, when the individual applies for measures of a public institution using the service, a second serial number which is a serial number of an electronic certificate for user certification read from a second individual number card. The gateway server 20 determines, based on the first serial number and the second serial number, whether the first individual number card is identical with the second individual number card. The gateway server 20 executes processing relating to the application for the measures when the first individual number card is identical with the second individual number card.SELECTED DRAWING: Figure 1

Description

[Technical Field]

[0001] The present disclosure relates to data processing technology, and more particularly to an information processing system and an information processing method. [Background technology]

[0002] In recent years, various industries and sectors have implemented measures to promote sales of products and services (see, for example, Patent Document 1). In addition, the national and local governments have implemented measures to provide benefits with the aim of popularizing personal identification number cards (also known as "My Number Cards") and expanding the use of cashless payments. [Prior art documents] [Patent documents]

[0003] [Patent Document 1] Japanese Patent Application Laid-Open No. 2011-198277 Summary of the Invention [Problem to be solved by the invention]

[0004] Among the measures implemented by public institutions, there are some in which individuals who apply for the measure submit the serial number of the electronic certificate for user authentication recorded on their own My Number Card to the public institution that is the employer, and the public institution that is the employer screens the recipients of the measure (for example, whether or not the recipient is eligible for benefits).If a person who would normally be ineligible for the measure applies by fraudulently using the My Number Card of a person eligible for the measure, there is a possibility that benefits will be provided to a person who would not normally be eligible for the measure.

[0005] One object of the present disclosure is to provide a technology that prevents fraudulent receipt of benefits in policies that are applied for using personal identification number cards. [Means for solving the problem]

[0006] To solve the above problems, an information processing system according to an aspect of the present disclosure includes a first acquisition unit that acquires a first serial number, which is the serial number of an electronic certificate for user authentication read from a first personal identification number card, when an individual logs in to the service of the present information processing system; a second acquisition unit that acquires a second serial number, which is the serial number of an electronic certificate for user authentication read from a second personal identification number card, when an individual uses the service to apply for a measure of a public institution; a determination unit that determines whether the first personal identification number card and the second personal identification number card are the same based on the first serial number and the second serial number; and an application unit that executes processing related to the application for the measure when the first personal identification number card and the second personal identification number card are the same.

[0007] Another aspect of the present disclosure is an information processing method. This method includes steps of: acquiring a first serial number, which is the serial number of an electronic certificate for user authentication read from a first personal identification number card, when an individual logs in to the service of the present information processing system; acquiring a second serial number, which is the serial number of an electronic certificate for user authentication read from a second personal identification number card, when an individual uses the service to apply for a measure of a public institution; determining whether the first personal identification number card and the second personal identification number card are the same based on the first serial number and the second serial number; and executing processing related to the application for the measure when the first personal identification number card and the second personal identification number card are the same, which are executed by a computer.

[0008] In addition, any combination of the above components, and those obtained by converting the expression of the present disclosure among an apparatus, a computer program, a recording medium storing the computer program, etc. are also effective as aspects of the present disclosure.

Effect of the Invention

[0009] According to the technology of the present disclosure, it is possible to prevent improper receipt of benefits in a measure applied using a personal identification number card.

Brief Description of the Drawings

[0010]

Figure 1

Figure 2

Figure 3

Figure 4

Figure 5

Embodiments for Carrying Out the Invention

[0011] Hereinafter, the present disclosure will be described with reference to the drawings based on preferred embodiments. The embodiments are illustrative rather than limiting the present disclosure, and all features and combinations thereof described in the embodiments are not necessarily essential to the present disclosure. Also, when terms such as "first", "second", etc. are used in this specification or claims, unless otherwise specified, these terms do not represent any order or importance, but are for distinguishing one configuration from another.

[0012] (First Embodiment) Among the measures taken by local governments, there are some in which individuals applying for the measures submit the serial number of the electronic certificate for user identification recorded on their personal identification card to the local government, and the local government examines the recipients of the benefits. Unless otherwise specified, hereinafter, when simply referred to as the "serial number", it means the serial number of the electronic certificate for user identification recorded on the personal identification card.

[0013] The measures taken by the local government may include child-rearing support measures and single-parent family support measures. Residents of the local government, etc. apply for the measures using their personal identification number cards. The benefits provided to specific recipients in the measures may include various value exchange media. In an embodiment, the local government implements a benefit program that provides benefits in the form of payments to specific individuals who meet predetermined conditions. The benefits in the form of payments may include at least one of cash currency, points, coupons, gift certificates, and regional revitalization vouchers. For example, the points can be exchanged for payment means such as electronic money and used for shopping, etc.

[0014] When applying for the local government's measures via the services of the information processing system, the applicant needs to have the serial number recorded on the personal identification number card read by the IC card reader both when logging in to the service and when applying for the measures. This is because the signature verifier when logging in to the service (for example, the administrator of the system) is different from the signature verifier when applying for the measures (for example, the local government). Conventionally, if a person who is originally not eligible for the benefits uses their personal identification number card to log in to the service and then uses the personal identification number card of a person eligible for the benefits (for example, a person whose benefit payment is approved in the review) to apply for the measures, there is a possibility that the benefit payment will be made to a person who is originally not eligible for the benefits.

[0015] Hereinafter, the personal identification number card whose serial number is read when logging in to the service of the information processing system is also referred to as the "personal identification number card at login", and the personal identification number card whose serial number is read when applying for the measures is also referred to as the "personal identification number card at application". The electronic application system of the first embodiment prevents unauthorized use of another person's personal identification number card by confirming whether the personal identification number card at login and the personal identification number card at application are the same based on the serial number when applying for the local government's measures.

[0016] Figure 1 shows the configuration of the electronic application system 10 of the first embodiment. The electronic application system 10 is an information processing system that supports the subsidy business of a public institution (a local government in the first embodiment). In other words, the electronic application system 10 is a computer system that supports the measures of the local government that provides subsidies to specific individuals. The electronic application system 10 includes a user terminal 12, a local government system 16, a portal server 18, a gateway server 20, and a ledger server 22. Each device constituting the electronic application system 10 is connected via a communication network 24 including a LAN, WAN, and the Internet.

[0017] The user terminal 12 is an information terminal operated by an individual who has a personal number card and who applies for a measure (subsidy) (hereinafter also referred to as a "user"). A user can be said to be an individual, a national, or a resident who can be a recipient of subsidy in the subsidy business of the local government. The user terminal 12 may be a PC equipped with an IC card reader, a smartphone, or a tablet terminal.

[0018] In Figure 1, one user terminal 12 is depicted, but in reality, there are multiple user terminals 12. At least some of the user terminals 12 have an application provided by a payment service provider and an application that supports cashless payment, in other words, electronic payment (hereinafter also referred to as "Payment App 14") installed. The Payment App 14 incorporates an SDK (Software Development Kit) that provides functions to support communication and authentication with the gateway server 20.

[0019] The local government system 16 is an information processing system of the local government that conducts the subsidy business. The local government system 16 includes an information terminal operated by a person in charge of the local government. The portal server 18 is an information processing device that provides a website (hereinafter also referred to as a "My Portal") as an online window for administrative procedures.

[0020] The ledger server 22 is an information processing device having a database function for managing the application status of users for the measures of the local government's subsidy program and the subsidy payment status for the target persons. The gateway server 20 is an information processing device that provides a gateway function to the ledger server 22. For example, the gateway server 20 provides functions such as an ID management function, a measure inquiry function, and a measure application function for users. The ID management function can also be said to be an account management function.

[0021] Each of the portal server 18, the gateway server 20, and the ledger server 22 may be configured by a single computer or a combination of multiple computers. Note that the "information processing system" referred to in the claims may refer to the entire electronic application system 10 or the gateway server 20 alone.

[0022] FIG. 2 is a block diagram showing the functional blocks of the gateway server 20 in FIG. 1. Each block shown in the block diagrams of this specification can be realized, in terms of hardware, by elements and electronic circuits such as a computer's processor, CPU, and memory, and mechanical devices, and can be realized, in terms of software, by a computer program or the like. Here, however, functional blocks realized by their cooperation are depicted. Therefore, it is understood by those skilled in the art that these functional blocks can be realized in various forms by a combination of hardware and software.

[0023] The gateway server 20 includes a processing unit 30, a storage unit 32, and a communication unit 34. The processing unit 30 executes various information processes. The processing unit 30 may be realized by a processor (such as a CPU) of a computer constituting the gateway server 20. The storage unit 32 stores data that is referred to or updated by the processing unit 30. The storage unit 32 may be realized by a storage or memory of a computer constituting the gateway server 20. The communication unit 34 communicates with an external device according to a predetermined communication protocol. The processing unit 30 transmits and receives data to and from the user terminal 12, the local government system 16, the portal server 18, and the ledger server 22 via the communication unit 34.

[0024] The memory unit 32 includes an ID memory unit 36. The ID memory unit 36 stores the user's ID. FIG. 3 shows the relationship between multiple types of IDs in the first embodiment. The serial number is the serial number of the electronic certificate for user authentication stored in the user's personal number card. When a user's personal number card is reissued or the like, the serial number of the user may be changed. That is, there may be multiple serial numbers as the serial number of one user. In a public personal authentication system (not shown in FIG. 1), old and new serial numbers are managed in association with each other for each individual.

[0025] The gateway ID is a unique ID for each user. The gateway ID is an ID different from the user's personal number and is the personal ID for policy application. For example, the gateway ID is used for application for benefits and management of application status. The gateway ID is a dedicated ID assigned only to one user. Even if multiple serial numbers are issued for the user, the gateway ID is one. That is, the relationship between the gateway ID and the serial number is one-to-N.

[0026] The authentication ID is a value obtained by converting the serial number using a predetermined algorithm. This algorithm is a predetermined one-way function in the first embodiment, for example, a hash function. A one-way function is a function that is easy to calculate the function value but very difficult to calculate the inverse function. The authentication ID and the serial number are in a one-to-one relationship. When multiple serial numbers are issued for one user, an authentication ID corresponding to each of the multiple serial numbers is generated.

[0027] The handling of the serial number of the electronic certificate for user authentication is restricted, and it is not permitted to pass the serial number from the gateway server 20 to the ledger server 22. Therefore, for policy inquiries from the gateway server 20 to the ledger server 22, an authentication ID obtained by converting the serial number is used instead of the serial number.

[0028] In the first embodiment, the ID storage unit 36 stores, for each user, one gateway ID and one or more serial numbers in association with each other. On the other hand, the authentication ID is dynamically generated from the serial number each time it is required. As a modification, the storage unit 32 may further store one or more authentication IDs corresponding to one or more serial numbers.

[0029] Returning to FIG. 2, the processing unit 30 includes a login reception unit 40, a first serial number acquisition unit 42, a conversion unit 44, a measure inquiry unit 46, a measure information transmission unit 48, a measure application reception unit 50, a second serial number acquisition unit 52, a determination unit 54, a measure application unit 56, and an error notification unit 58.

[0030] The functions of the plurality of functional blocks included in the processing unit 30 may be implemented in a computer program. This computer program may be stored in a recording medium, may be installed in the storage of the gateway server 20 via the recording medium, or may be downloaded via a communication network and installed in the storage of the gateway server 20. The processor of the gateway server 20 may read this computer program into the main memory and execute it to exhibit the functions of the plurality of functional blocks.

[0031] The login reception unit 40 receives a login to the ID management service provided by the gateway server 20. The login reception unit 40 may cooperate with the portal server 18 and receive the login of the user to the ID management service when the user logs in to the my portal provided by the portal server 18.

[0032] The first serial number acquisition unit 42, as the first acquisition unit, acquires the serial number of the electronic certificate for user authentication (hereinafter also referred to as the "login serial number") read from the user's personal number card (i.e., the personal number card at the time of login) when logging in to the ID management service, which is transmitted from the user terminal 12. The first serial number acquisition unit 42 stores the user's login serial number in the ID storage unit 36 in association with the information of the communication session with the user terminal 12.

[0033] The conversion unit 44 acquires an authentication ID (hereinafter also referred to as the "login authentication ID") obtained by converting the login serial number using a predetermined algorithm (a predetermined one-way function in the first embodiment).

[0034] The policy inquiry unit 46 transmits to the ledger server 22 data for inquiring about policies targeted at users (in other words, policies for which users are the recipients of benefits), and data for policy inquiry specified using the login authentication ID as a key. The policy inquiry unit 46 acquires information on policies targeted at users (hereinafter also referred to as the "applicable policies") transmitted from the ledger server 22 in response to the policy inquiry. The policy information transmission unit 48 transmits the information on the applicable policies transmitted from the ledger server 22 and acquired by the policy inquiry unit 46 to the user terminal 12.

[0035] The policy application reception unit 50 receives application information for a certain policy transmitted from the user terminal 12. The second serial number acquisition unit 52, as the second acquisition unit, acquires the serial number of the electronic certificate for user authentication (hereinafter also referred to as the "application serial number") read from the user's personal number card (i.e., the personal number card at the time of application) when applying for a local government policy using the ID management service. Note that applying for a local government policy can also be said to be applying for the payment of benefits.

[0036] The determination unit 54 determines whether the personal number card at the time of login and the personal number card at the time of application are the same based on the login serial number and the application serial number. In the first embodiment, if the login serial number and the application serial number are the same, the determination unit 54 determines that the personal number card at the time of login and the personal number card at the time of application are the same, and if the login serial number and the application serial number are different, the determination unit 54 determines that the personal number card at the time of login and the personal number card at the time of application are different.

[0037] If it is determined that the My Number Card at the time of login and the My Number Card at the time of application are the same, the policy application unit 56 executes processing related to application for the local government's policy, for example, executing application processing for a policy for a local government's subsidy program. The processing related to application for the local government's policy in the first embodiment includes processing to send the application serial number acquired by the second serial acquisition unit 52 to the local government system 16 as information used in the public institution's (local government's) review of whether or not a subsidy will be paid.

[0038] If it is determined that the My Number Card at the time of login and the My Number Card at the time of application are different, the policy application unit 56 stops the process related to the application for the local government policy. If it is determined that the My Number Card at the time of login and the My Number Card at the time of application are different, the error notification unit 58 sends information indicating an error to the user terminal 12.

[0039] 4 is a flowchart showing the operation of the gateway server 20. The operation of the electronic application system 10 will be described below with reference to FIG. 4. A user in the following description is a specific individual who operates a specific user terminal 12.

[0040] The user terminal 12 accesses the portal server 18 according to the user's operation, and displays the web page of the my portal provided by the portal server 18 on the display. The user logs in to the ID management service provided by the gateway server 20 via the web page of the my portal. Alternatively, the user launches the payment App on the user terminal 12 and logs in to the ID management service provided by the gateway server 20 via the screen of the payment App. Here, it is assumed that the user logs in to the ID management service when requesting information on measures for which the user is eligible for benefits.

[0041] The web page of the my portal and the screen of the payment App are configured to display an instruction to read the personal number card when logging in to the ID management service. The instruction to read the personal number card includes information instructing the user to hold the personal number card over the IC card reader when consenting to provide the serial number recorded on the personal number card to the company that manages the gateway server 20.

[0042] The user holds the personal number card over the IC card reader of the user terminal 12 according to this instruction. The IC card reader reads the serial number (i.e., the serial number at login) recorded on the user's personal number card. The user terminal 12 transmits data including the serial number at login read by the IC card reader from the user's personal number card to the gateway server 20 for a login request to the ID management service according to the user's operation. The signer for verifying the serial number at login is the company that manages the gateway server 20.

[0043] When the login reception unit 40 of the gateway server 20 receives a login request to the ID management service transmitted from the user terminal 12 (Y in S10), it executes a predetermined login process including authentication. The first serial number acquisition unit 42 of the gateway server 20 acquires the serial number at login of the user included in the login request and performs signature verification (S12).

[0044] In the first embodiment, the ledger server 22 stores the identification information of the beneficiaries of the subsidy for each policy registered from the local government system 16. The identification information of the target person stored in the ledger server 22 is a value (authentication ID) obtained by converting the serial number of the target person using the same predetermined one-way function as the conversion unit 44 of the gateway server 20. The conversion unit 44 of the gateway server 20 converts the login serial number obtained in S12 using the predetermined one-way function, and obtains the converted value as the login authentication ID. The policy inquiry unit 46 of the gateway server 20 transmits the policy inquiry data specifying the login authentication ID to the ledger server 22.

[0045] The ledger server 22 identifies, as the applicable policy, the policy that uses the login authentication ID included in the policy inquiry data as the beneficiary from among the plurality of policies registered in advance. The ledger server 22 transmits information regarding the applicable policy to the gateway server 20. The information regarding the applicable policy may include details indicating the conditions and procedures for the payment of the subsidy. The policy inquiry unit 46 of the gateway server 20 receives the information regarding the applicable policy transmitted from the ledger server 22. The policy information transmission unit 48 of the gateway server 20 transmits the information regarding the applicable policy to the user terminal 12 (S14).

[0046] The user terminal 12 displays the information regarding the applicable policy on the display as the inquiry result of the policy targeted by the user. The user selects, from the policies targeted at the user displayed on the display, the policy for which the user wishes to apply for the payment of the subsidy.

[0047] The web page of the My Portal and the screen of the payment App are configured to display an instruction to read the personal number card when applying for a policy. The instruction to read the personal number card includes information instructing the user to hold the personal number card over the IC card reader when the user agrees to provide the serial number recorded on the personal number card to the company and local government that manage the gateway server 20.

[0048] The user holds the personal identification number card over the IC card reader of the user terminal 12 according to this instruction. The IC card reader reads the serial number (i.e., the application serial number) recorded on the user's personal identification number card. The user terminal 12 transmits, according to the user's operation, the data for checking (hereinafter referred to as "check data") including the application serial number read by the IC card reader from the user's personal identification number card and the data for application of the measure (hereinafter referred to as "application data") to the gateway server 20. The signatory verifier of the application serial number in the check data is the company that manages the gateway server 20. The signatory verifier of the application serial number in the application data is the local government of the entity that undertakes the measure (in other words, the local government to which the benefit application is made).

[0049] The measure application reception unit 50 of the gateway server 20 receives the data of the measure application (check data and application data) transmitted from the user terminal 12 (Y in S16). The second serial number acquisition unit 52 of the gateway server 20 acquires the application serial number of the user included in the check data and performs signature verification (S18). The determination unit 54 of the gateway server 20 determines whether the personal identification number card at the time of login and the personal identification number card at the time of application are the same by determining whether the serial number at the time of login acquired in S12 and the serial number at the time of application acquired in S18 are the same (S20).

[0050] When it is determined that the personal identification number card at the time of login and the personal identification number card at the time of application are the same (Y in S22), the measure application unit 56 of the gateway server 20 transmits the application data transmitted from the user terminal 12 to the local government system 16 (S24). After verifying the signature of the application data, the local government identifies the individual based on the application serial number of the user (also referred to as the applicant or the person subject to review) included in the application data and determines whether to provide the benefit to the user.

[0051] When it is determined that the personal identification number card at the time of login is different from the personal identification number card at the time of application (N in S22), the policy application unit 56 of the gateway server 20 aborts the processing of the policy application. The policy application unit 56 suppresses the transmission of the application data from the user to the local government system 16.

[0052] The error notification unit 58 of the gateway server 20 transmits an error notification including information regarding that the personal identification number card at the time of login is different from the personal identification number card at the time of application to the user terminal 12 (S26). The user terminal 12 displays the error notification on the display. For example, the error notification may be displayed on the screen after the personal identification number card at the time of application is read, or may include a message such as "The identity with the personal identification number card at the time of login cannot be confirmed. The application process is aborted."

[0053] If the policy application data is not received from the user terminal 12 (N in S16), the processing after S18 is skipped. If the login request data is not received from the user terminal 12 (N in S10), the processing after S12 is skipped.

[0054] According to the gateway server 20 of the first embodiment, it is confirmed whether the personal identification number card used for logging in to the system is the same as the personal identification number card used for applying for the policy, and the application process for the policy is executed on the condition that they are the same. Thereby, it is possible to prevent a person who should originally have the benefit payment rejected in the examination from fraudulently receiving the benefit payment by logging in with their own personal identification number card and then applying for the benefit using the personal identification number card of the beneficiary.

[0055] (Second Embodiment) The second embodiment of the present disclosure will be mainly described focusing on the differences from the first embodiment. Among the components of the second embodiment, the components that are the same as or equivalent to those of the first embodiment are denoted by the same reference numerals, and redundant explanations will be omitted as appropriate.

[0056] In the second embodiment, the measures taken by the local government are to determine the target recipients of the benefits provided by the measures by obtaining the serial numbers of the electronic certificates for user identification of the individuals who are the targets of the measures from the resident registration system or the like and registering them in the management ledger (in the embodiment, the ledger server 22). In the electronic application system 10 of the second embodiment, when applying for the local government's measures, the settlement service account that will receive the benefit payment is registered. The settlement service account is the account (ID, etc.) of the user registered with the settlement operator, for example, the account into which the electronic money corresponding to the amount of the benefit payment is deposited.

[0057] To ensure that all eligible individuals can apply for the local government's measures, information terminals (hereinafter also referred to as "support terminals") where applications for the measures can be made may be installed at facilities such as city halls, post offices, and large stores. The support terminals are used by multiple users. Conventionally, if the previous user of the support terminal logs in to the My Portal (in other words, the ID management service of the gateway server 20) to view the measure information targeted at themselves and then leaves the support terminal without logging out, the next user of the support terminal can apply for the measures targeted at the previous user and register their own settlement service account as the payment destination for the benefit payment. As a result, the benefit payment for the measures targeted at the previous user may be paid into the settlement service account of the next user.

[0058] Therefore, in the electronic application system 10 of the second embodiment, the serial number is read from the personal number card not only when logging in to the My Portal (in other words, when logging in to the ID management service of the gateway server 20) but also when applying for the measures (in other words, when registering the settlement service account). The gateway server 20 of the second embodiment checks whether the personal number card at the time of login and the personal number card at the time of application are the same based on the serial number. This prevents the registration of an improper payment destination.

[0059] FIG. 5 shows the configuration of the electronic application system 10 of the second embodiment. The electronic application system 10 of the second embodiment further includes a support terminal 26 in addition to the components of the electronic application system 10 of the first embodiment. The support terminal 26 includes an IC card reader. The user operates the support terminal 26 to view the policy information targeted at himself / herself and apply for the policy.

[0060] The gateway server 20 of the second embodiment includes the same functional blocks as the gateway server 20 of the first embodiment shown in FIG. 2.

[0061] With reference to FIG. 4, the operation of the gateway server 20 of the second embodiment will be described. The operations (S10 to S14) from when the support terminal 26 logs in to the ID management service of the gateway server 20 until the support terminal 26 provides the policy information are the same as those of the first embodiment, so the description thereof will be omitted.

[0062] The user selects the policy to be applied for from the policies displayed on the display of the support terminal 26. The web page of the My Portal is configured to display information instructing the user to hold the personal number card over the IC card reader when applying for the policy. The user holds the personal number card over the IC card reader of the support terminal 26 in accordance with the instruction. The support terminal 26 transmits the policy application data to the gateway server 20. This data includes the information of the policy to be applied for, the user's settlement service account which is the recipient of the benefit payment, and the serial number of the electronic certificate for user identification (i.e., the serial number at the time of application) read by the IC card reader from the user's personal number card.

[0063] The policy application reception unit 50 of the gateway server 20 receives the policy application data transmitted from the support terminal 26 (Y in S16). The second serial number acquisition unit 52 of the gateway server 20 acquires the applicant's serial number at the time of application included in the policy application data (S18). The determination unit 54 of the gateway server 20 determines whether the serial number at the time of login acquired in S12 is the same as the serial number at the time of application acquired in S18, thereby determining whether the personal number card at the time of login and the personal number card at the time of application are the same (S20).

[0064] When it is determined that the personal number card at the time of login and the personal number card at the time of application are the same (Y in S22), the policy application unit 56 of the gateway server 20 transmits the policy application data including the user's payment service account transmitted from the support terminal 26 to the ledger server 22. The ledger server 22 executes processing related to the payment of the benefit to the payment service account indicated by the policy application data transmitted from the gateway server 20.

[0065] When it is determined that the personal number card at the time of login and the personal number card at the time of application are different (N in S22), the policy application unit 56 of the gateway server 20 aborts the policy application process. The policy application unit 56 suppresses transmitting the policy application data to the ledger server 22.

[0066] The error notification unit 58 of the gateway server 20 transmits an error notification including information regarding the difference between the personal number card at the time of login and the personal number card at the time of application to the support terminal 26 (S26). The support terminal 26 displays the error notification on the display. For example, the error notification may be displayed on the screen after reading the personal number card at the time of application, or may include a message such as "The identity with the personal number card at the time of login cannot be confirmed. The application process will be aborted."

[0067] According to the gateway server 20 of the second embodiment, it is confirmed whether the personal identification number card used for logging in to the system is the same as the personal identification number card used for applying for a measure (registration of a settlement service account), and the measure application process is executed on the condition that they are the same. Thereby, even when the previous user of the support terminal 26 leaves the support terminal 26 without logging out from the system, it is possible to prevent the benefit targeted at the previous user from being paid to the settlement service account of the next user of the support terminal 26.

[0068] As described above, the present disclosure has been described based on the first embodiment and the second embodiment. It should be understood by those skilled in the art that the content described in each embodiment is an example, and various modifications are possible for the combination of the components and processing processes of each embodiment, and such modifications are also within the scope of the present disclosure.

[0069] Any combination of the above-described embodiments and modifications is also useful as an embodiment of the present disclosure. The new embodiment generated by the combination has the effects of the combined embodiments and modifications. It should also be understood by those skilled in the art that the functions to be fulfilled by each constituent element described in the claims are realized by a single one of the constituent elements shown in the embodiments and modifications or by their cooperation.

Description of Reference Numerals

[0070] 10 Electronic application system, 12 User terminal, 16 Local government system, 20 Gateway server, 22 Ledger server, 42 First serial acquisition unit, 52 Second serial acquisition unit, 54 Determination unit, 56 Measure application unit.

Claims

1. a first acquisition unit that acquires a first serial number, which is the serial number of an electronic certificate for user authentication read from a first personal identification number card, when an individual logs in to the service of the present information processing system; a second acquisition unit that acquires a second serial number, which is the serial number of an electronic certificate for user authentication read from a second personal identification number card, when an individual applies for a public institution's measure using the service; a determination unit that determines whether the first personal identification number card and the second personal identification number card are the same based on the first serial number and the second serial number; a measure application unit that executes processing related to the application for the measure when the first personal identification number card and the second personal identification number card are the same; An information processing system comprising the above.

2. The processing related to the application for the measure includes transmitting the second serial number to the public institution's system as information used for the public institution's review. The information processing system according to Claim 1.

3. When the first personal identification number card and the second personal identification number card are different, the measure application unit aborts the processing related to the application for the measure. The information processing system according to Claim 1 or 2.

4. a step of acquiring a first serial number, which is the serial number of an electronic certificate for user authentication read from a first personal identification number card, when an individual logs in to the service of the present information processing system; a step of acquiring a second serial number, which is the serial number of an electronic certificate for user authentication read from a second personal identification number card, when an individual applies for a public institution's measure using the service; a step of determining whether the first personal identification number card and the second personal identification number card are the same based on the first serial number and the second serial number; a step of executing processing related to the application for the measure when the first personal identification number card and the second personal identification number card are the same; An information processing method executed by a computer.

Images